# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=708 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 709 --- ## [Query using Runtime Field](https://discuss.elastic.co/t/query-using-runtime-field/296864)
**Author:** [@jkulcsar](https://discuss.elastic.co/u/jkulcsar)\ **Replies:** 1\ **Last updated:** [February 10, 2022, 5:24pm UTC](https://discuss.elastic.co/t/query-using-runtime-field/296864 "2022-02-10T17:24:43Z")
Hello all I've added a runtime field to my logstash indexes to concatenate two fields on the fly (in this context: the Model and Serial Number of a product): PUT logstash-\*/\_mapping { "runtime": { "m\_s\_unique\_id"… --- ## [Any issue store integer values in text field](https://discuss.elastic.co/t/any-issue-store-integer-values-in-text-field/296143)
**Author:** [@jsjs2](https://discuss.elastic.co/u/jsjs2)\ **Replies:** 6\ **Last updated:** [February 10, 2022, 5:21pm UTC](https://discuss.elastic.co/t/any-issue-store-integer-values-in-text-field/296143 "2022-02-10T17:21:26Z")
Hi, I have type text field, the value for this field sometimes comes in as integer, it is store in ES as integer. any issue when querying this field later on? will the integer value be indexed as string value by ES? th… --- ## [Using an aggregation to create histogram in Kibana?](https://discuss.elastic.co/t/using-an-aggregation-to-create-histogram-in-kibana/296697)
**Author:** [@saurab](https://discuss.elastic.co/u/saurab)\ **Replies:** 1\ **Last updated:** [February 10, 2022, 3:57pm UTC](https://discuss.elastic.co/t/using-an-aggregation-to-create-histogram-in-kibana/296697 "2022-02-10T15:57:14Z")
I have an aggregation on a packetbeat index as follows: GET packetbeat-7.16.3-2022.02.07-000001/\_search?size=0 { "query": { "term": { "destination.port": 9200 } }, "aggs": { "myagg1": { "t… --- ## [Integration Azure Metrics - No storaged used capacity](https://discuss.elastic.co/t/integration-azure-metrics-no-storaged-used-capacity/296190)
**Author:** [@Teckinfor](https://discuss.elastic.co/u/Teckinfor)\ **Replies:** 1\ **Last updated:** [February 10, 2022, 3:29pm UTC](https://discuss.elastic.co/t/integration-azure-metrics-no-storaged-used-capacity/296190 "2022-02-10T15:29:30Z")
Hello, I can't see some data such as "storage used capacity", can you help me please? Thanks in advance --- ## [Error with Azure Billing Metrics Integration - Version API incorrect](https://discuss.elastic.co/t/error-with-azure-billing-metrics-integration-version-api-incorrect/296056)
**Author:** [@Teckinfor](https://discuss.elastic.co/u/Teckinfor)\ **Replies:** 1\ **Last updated:** [February 10, 2022, 3:26pm UTC](https://discuss.elastic.co/t/error-with-azure-billing-metrics-integration-version-api-incorrect/296056 "2022-02-10T15:26:13Z")
Hello, For my internship project, I have to integrate the monitoring of costs in a monitoring tool. So I wanted to use the Azure Billing Metrics integration. The problem is that I get nothing at all because of the foll… --- ## [Set default zoom on a canvas in a map](https://discuss.elastic.co/t/set-default-zoom-on-a-canvas-in-a-map/296632)
**Author:** [@Angad\_Panesar1](https://discuss.elastic.co/u/Angad_Panesar1)\ **Replies:** 3\ **Last updated:** [February 10, 2022, 3:13pm UTC](https://discuss.elastic.co/t/set-default-zoom-on-a-canvas-in-a-map/296632 "2022-02-10T15:13:25Z")
How would you set the map on a canvas to a default zoom like 4.99 if you refresh the page? Is there anything I have to put in the expression editor? Also, whenever I click on an ID in the dropdown menu, the map vanishes… --- ## [Data Table with changeable bucket interval](https://discuss.elastic.co/t/data-table-with-changeable-bucket-interval/296659)
**Author:** [@jspalti](https://discuss.elastic.co/u/jspalti)\ **Replies:** 1\ **Last updated:** [February 10, 2022, 3:02pm UTC](https://discuss.elastic.co/t/data-table-with-changeable-bucket-interval/296659 "2022-02-10T15:02:29Z")
I have a data table visualization that currently has a bucket date histogram with an interval of Month and another table with an interval of Day. I would like to have a single visualization with a control that can toggl… --- ## [DB sessions | logstash](https://discuss.elastic.co/t/db-sessions-logstash/296845)
**Author:** [@Nasser](https://discuss.elastic.co/u/Nasser)\ **Replies:** 1\ **Last updated:** [February 10, 2022, 2:44pm UTC](https://discuss.elastic.co/t/db-sessions-logstash/296845 "2022-02-10T14:44:34Z")
Hi i have 20 sql query, 2 query in each jdbc.conf file my question is how many sessions will jdbc open with DB to execute the query ? will open one session and execute 10 query or one session for each query ? my con… --- ## [Logstash output email](https://discuss.elastic.co/t/logstash-output-email/296856)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 0\ **Last updated:** [February 10, 2022, 2:32pm UTC](https://discuss.elastic.co/t/logstash-output-email/296856 "2022-02-10T14:32:54Z")
Hi, I have log file contains more than one exception so i want for this file when i found a word "EXCEPTION" just sending me one email. logstash.conf: output{ stdout { codec =\> rubydebug } if ("EXCEPTION… --- ## [How you connected Filebeat with Logstash in your Kubernetes Cluster using beats input?](https://discuss.elastic.co/t/how-you-connected-filebeat-with-logstash-in-your-kubernetes-cluster-using-beats-input/296847)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 0\ **Last updated:** [February 10, 2022, 1:50pm UTC](https://discuss.elastic.co/t/how-you-connected-filebeat-with-logstash-in-your-kubernetes-cluster-using-beats-input/296847 "2022-02-10T13:50:04Z")
Hi folks, when I try to send logs from filebeat via output.logstash: hosts: \["logstash-service:5044"\] to my logtash pod with: input { beats { port =\> 5044 } } without any security settings for … --- ## [Store Path Data to Multiple Location FIle](https://discuss.elastic.co/t/store-path-data-to-multiple-location-file/296538)
**Author:** [@Xenial](https://discuss.elastic.co/u/Xenial)\ **Replies:** 7\ **Last updated:** [February 10, 2022, 1:00pm UTC](https://discuss.elastic.co/t/store-path-data-to-multiple-location-file/296538 "2022-02-10T13:00:58Z")
Hello, i've Elasticsearch server, but the storage is full. My server run on vmware, i want to add new disk, and i want to mount on /backup location. When i add to /etc/Elasticsearch/Elasticsearch.yml and add line Path.… --- ## [Change Default Discover Visualization](https://discuss.elastic.co/t/change-default-discover-visualization/294531)
**Author:** [@DrBees](https://discuss.elastic.co/u/DrBees)\ **Replies:** 1\ **Last updated:** [February 10, 2022, 12:10pm UTC](https://discuss.elastic.co/t/change-default-discover-visualization/294531 "2022-02-10T12:10:11Z")
Is it possible to change the default visualization from a histogram to a table? I know in the advanced settings you can change the number of terms for the histogram but I want a different visualization preferable a tabl… --- ## [Splunk to ELK Migration](https://discuss.elastic.co/t/splunk-to-elk-migration/296801)
**Author:** [@Arun\_Murugappan](https://discuss.elastic.co/u/Arun_Murugappan)\ **Replies:** 2\ **Last updated:** [February 10, 2022, 11:09am UTC](https://discuss.elastic.co/t/splunk-to-elk-migration/296801 "2022-02-10T11:09:20Z")
There are 2000 dashboards in Splunk. Out of which, some are used and some are not. How to check that?How to migrate it to ELK by filtering out unused or junk dashboards. --- ## [Delete all docs that have duplicate field values](https://discuss.elastic.co/t/delete-all-docs-that-have-duplicate-field-values/296702)
**Author:** [@alfianaf](https://discuss.elastic.co/u/alfianaf)\ **Replies:** 4\ **Last updated:** [February 10, 2022, 10:48am UTC](https://discuss.elastic.co/t/delete-all-docs-that-have-duplicate-field-values/296702 "2022-02-10T10:48:57Z")
Hello, I ingest some data into my cluster, and turned out some of my data has been ingested twice, so some of the data is doubled. My index has unique field, because some of it is doubled, I'm trying to search for dupli… --- ## [Rejected execution of replica operation](https://discuss.elastic.co/t/rejected-execution-of-replica-operation/296818)
**Author:** [@Ariel\_Benichou](https://discuss.elastic.co/u/Ariel_Benichou)\ **Replies:** 0\ **Last updated:** [February 10, 2022, 9:16am UTC](https://discuss.elastic.co/t/rejected-execution-of-replica-operation/296818 "2022-02-10T09:16:50Z")
Can someone explain what this error means? rejected execution of replica operation \[replica\_bytes=1032693097, replica\_operation\_bytes=370889441, max\_replica\_bytes=1288490188\] Info This log has been retrieved from DATA\_… --- ## [Kibana discover search download](https://discuss.elastic.co/t/kibana-discover-search-download/296802)
**Author:** [@mangeshs](https://discuss.elastic.co/u/mangeshs)\ **Replies:** 1\ **Last updated:** [February 10, 2022, 9:13am UTC](https://discuss.elastic.co/t/kibana-discover-search-download/296802 "2022-02-10T09:13:08Z")
I know we can download or export discover search results as csv but I want to know in which version and how? I am currently using 7.4.0 --- ## [Monthly query performance on too many shards](https://discuss.elastic.co/t/monthly-query-performance-on-too-many-shards/296429)
**Author:** [@alissan](https://discuss.elastic.co/u/alissan)\ **Replies:** 10\ **Last updated:** [February 10, 2022, 8:48am UTC](https://discuss.elastic.co/t/monthly-query-performance-on-too-many-shards/296429 "2022-02-10T08:48:03Z")
Hello, I have an Elasticsearch cluster on 5 nodes. I use Elasticsearch for log management and 3 indexes are created every hour (1 shard, 0 replica) Every log line have 20-70 fields, like IP, port, hostname, user agent… --- ## [Why scoring is expensive](https://discuss.elastic.co/t/why-scoring-is-expensive/296808)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 1\ **Last updated:** [February 10, 2022, 8:25am UTC](https://discuss.elastic.co/t/why-scoring-is-expensive/296808 "2022-02-10T08:25:47Z")
referring to this doc for example, a score function is computationally expensive and it is sufficient to compute the score on a filtered set of documents. why scoring is expensive in which terms we are talking about. … --- ## [Joins in elasticsearch](https://discuss.elastic.co/t/joins-in-elasticsearch/296810)
**Author:** [@Ernesto\_Rodolfo\_Cast](https://discuss.elastic.co/u/Ernesto_Rodolfo_Cast)\ **Replies:** 1\ **Last updated:** [February 10, 2022, 8:24am UTC](https://discuss.elastic.co/t/joins-in-elasticsearch/296810 "2022-02-10T08:24:00Z")
Hi, I have several index aliases and I need to make a SQL-like join between them. Elasticsearch does not allow to create aliases of aliases. Is there any way to solve this problem. --- ## [Difference between canvas and dashboard](https://discuss.elastic.co/t/difference-between-canvas-and-dashboard/296619)
**Author:** [@Ernesto\_Rodolfo\_Cast](https://discuss.elastic.co/u/Ernesto_Rodolfo_Cast)\ **Replies:** 2\ **Last updated:** [February 10, 2022, 7:39am UTC](https://discuss.elastic.co/t/difference-between-canvas-and-dashboard/296619 "2022-02-10T07:39:14Z")
what is the difference between canvas and dashboards in kibana? --- ## [How to check the total number of data over 10,000?](https://discuss.elastic.co/t/how-to-check-the-total-number-of-data-over-10-000/296799)
**Author:** [@sramana235](https://discuss.elastic.co/u/sramana235)\ **Replies:** 2\ **Last updated:** [February 10, 2022, 7:26am UTC](https://discuss.elastic.co/t/how-to-check-the-total-number-of-data-over-10-000/296799 "2022-02-10T07:26:00Z")
Hello friends There are more than 1 million docs in the index. At this time, when information is obtained through match\_all, the total value is displayed as 10,000. How can I check the number of doc? I know that more… --- ## [Unassigned replicas with status CLUSTER\_RECOVERED](https://discuss.elastic.co/t/unassigned-replicas-with-status-cluster-recovered/296746)
**Author:** [@Adityadgr8](https://discuss.elastic.co/u/Adityadgr8)\ **Replies:** 2\ **Last updated:** [February 10, 2022, 7:00am UTC](https://discuss.elastic.co/t/unassigned-replicas-with-status-cluster-recovered/296746 "2022-02-10T07:00:18Z")
Hello All, I have a single node Elasticsearch setup. I have unassigned replicas Here is the kibana query through which I am checking: GET \_cat/shards?v=true&h=index,shard,prirep,state,node,unassigned.reason&s=state a… --- ## [Color range on Metric Widget not working on Average Metric](https://discuss.elastic.co/t/color-range-on-metric-widget-not-working-on-average-metric/296737)
**Author:** [@despinola](https://discuss.elastic.co/u/despinola)\ **Replies:** 5\ **Last updated:** [February 10, 2022, 6:38am UTC](https://discuss.elastic.co/t/color-range-on-metric-widget-not-working-on-average-metric/296737 "2022-02-10T06:38:20Z")
I have a dashboard that is using a color range on two metrics: The first one is a numeric field (count) and the color range works perfectly. The problem appears on the second metric which is also numeric but is an Aver… --- ## [Error: Loading chunk 12 failed](https://discuss.elastic.co/t/error-loading-chunk-12-failed/295304)
**Author:** [@zhangbiaozb](https://discuss.elastic.co/u/zhangbiaozb)\ **Replies:** 6\ **Last updated:** [February 10, 2022, 5:54am UTC](https://discuss.elastic.co/t/error-loading-chunk-12-failed/295304 "2022-02-10T05:54:38Z")
I confirm the elistic and kibana are installled correctly in Oracle Linux 7.9. But when I visit the kibana page, the error show: Version: 7.16.3 Build: 46336 Error: Loading chunk 12 failed. (error: http://168.138.163.1… --- ## [Very slow search performance after upgrade to 7.16.1](https://discuss.elastic.co/t/very-slow-search-performance-after-upgrade-to-7-16-1/296152)
**Author:** [@Dheeraj\_Gupta](https://discuss.elastic.co/u/Dheeraj_Gupta)\ **Replies:** 12\ **Last updated:** [February 10, 2022, 5:04am UTC](https://discuss.elastic.co/t/very-slow-search-performance-after-upgrade-to-7-16-1/296152 "2022-02-10T05:04:23Z")
I have noticed that search performance for my cluster has reduced drastically since upgrading to 7.16.1 (from 7.15). As an example consider an index dns-2022.01.31. There are around 56M docs in this and bulk of those do… --- ## [Logstash sends the log to elasticsearch and Syslog-ng or rsyslog(multiple outputs) which keeps the original log](https://discuss.elastic.co/t/logstash-sends-the-log-to-elasticsearch-and-syslog-ng-or-rsyslog-multiple-outputs-which-keeps-the-original-log/295322)
**Author:** [@tobyvu](https://discuss.elastic.co/u/tobyvu)\ **Replies:** 7\ **Last updated:** [February 10, 2022, 4:17am UTC](https://discuss.elastic.co/t/logstash-sends-the-log-to-elasticsearch-and-syslog-ng-or-rsyslog-multiple-outputs-which-keeps-the-original-log/295322 "2022-02-10T04:17:17Z")
I am wanting to configure the log from: Filebeat -\> Logstash -\> Elasticsearch and syslog-ng(or rsyslog). I configured with Syslog-ng to get the log following the instructions at: Sending logs from Logstash to syslog-ng … --- ## [Renaming Values](https://discuss.elastic.co/t/renaming-values/296769)
**Author:** [@chin1](https://discuss.elastic.co/u/chin1)\ **Replies:** 2\ **Last updated:** [February 10, 2022, 2:09am UTC](https://discuss.elastic.co/t/renaming-values/296769 "2022-02-10T02:09:06Z")
Hi there, Is there away to rename values within visuals? so for example filtering Colors which outputs 1 , 2 I want to rename these 1 == 'Red' 2== 'Blue' etc. --- ## [Problem with JDBC-Streaming filter plugin](https://discuss.elastic.co/t/problem-with-jdbc-streaming-filter-plugin/296791)
**Author:** [@steevhise](https://discuss.elastic.co/u/steevhise)\ **Replies:** 0\ **Last updated:** [February 9, 2022, 11:43pm UTC](https://discuss.elastic.co/t/problem-with-jdbc-streaming-filter-plugin/296791 "2022-02-09T23:43:04Z")
We're running into a problem where we're using jdbc-streaming to query a mysql database using a prepared statement and in some cases we get the error "java.sql.SQLException: No operations allowed after statement closed."… --- ## [Export to CSV shows blank fields](https://discuss.elastic.co/t/export-to-csv-shows-blank-fields/292218)
**Author:** [@Richard\_Schroeder](https://discuss.elastic.co/u/Richard_Schroeder)\ **Replies:** 15\ **Last updated:** [February 9, 2022, 11:36pm UTC](https://discuss.elastic.co/t/export-to-csv-shows-blank-fields/292218 "2022-02-09T23:36:52Z")
I'm exporting data from a view created from the discover module. In the data there is a field that is filled only in some records, less than 10% of records have this field filled. When I filter or export the entire listi… --- ## [Elasticsearch Software Bill of Materials (SBOM)](https://discuss.elastic.co/t/elasticsearch-software-bill-of-materials-sbom/296763)
**Author:** [@jtp1023](https://discuss.elastic.co/u/jtp1023)\ **Replies:** 1\ **Last updated:** [February 9, 2022, 10:39pm UTC](https://discuss.elastic.co/t/elasticsearch-software-bill-of-materials-sbom/296763 "2022-02-09T22:39:57Z")
Is there a published SBOM anywhere for Elasticsearch or any other document that shares all the components/libraries used within the application? This would be helpful when investigating security vulnerabilities and deter… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=707) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=709)